LGPO.exe /t /v /m "BlockUSB" He had pre-configured a registry.pol file. Within seconds, the command imported a strict USB-blocking policy across the test machines.
secedit /export /cfg C:\policy.inf He edited the .inf file to harden the macro settings, then pushed it back with: group policy editor cmd
He pulled up the heavy artillery: (Local Group Policy Object Utility). This wasn't a native Windows command; it was a tool from Microsoft’s Security Compliance Toolkit. Alex copied it to his network share. group policy editor cmd
To fix it, he didn't RDP into the machine. He used: group policy editor cmd